2015-12-09 19:04 GMT+01:00 Debarshi Ray <rishi.is(a)lostca.se>:
On Mon, Dec 07, 2015 at 10:48:55AM +0100, Tomas Hozza wrote:
> On 04.12.2015 15:57, Lennart Poettering wrote:
> > How do other popular desktop/consumer OSes deal with this? Windows,
> > MacOS, iOS, Android, ChromeOS? Does any of them do client-side DNSSEC
> > validation by default and how are they dealing with this issue?
As far as I've seen, no Operating System today ships client-side
DNSSEC validation. Some ISP (like Comcast since 2012) perform DNSSEC
validation on their DNS servers, as well as some public DNS (like
Google DNS) perform them.
Fabio